~ ZHPCleaner v2018.5.15.109 by Nicolas Coolman (2018/05/15) ~ Run by Haroldo (Administrator) (16/05/2018 15:23:48) ~ Web: https://www.nicolascoolman.com ~ Blog: https://nicolascoolman.eu/ ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : Version OK ~ Certificate ZHPCleaner: Legal ~ Type : Repair ~ Report : C:\Users\Haroldo\Desktop\ZHPCleaner.txt ~ Quarantine : C:\Users\Haroldo\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt ~ UAC : Activate ~ Boot Mode : Normal (Normal boot) Windows 10 Pro, 64-bit (Build 16299) ---\\ Alternate Data Stream (ADS). (0) ~ No malicious or unnecessary items found. ---\\ Services (0) ~ No malicious or unnecessary items found. ---\\ Browser internet (0) ~ No malicious or unnecessary items found. ---\\ Hosts file (1) ~ The hosts file is legitimate (1) ---\\ Scheduled automatic tasks. (0) ~ No malicious or unnecessary items found. ---\\ Explorer ( File, Folder) (15) MOVED file: C:\ProgramData\mia2686.tmp\data\OFFLINE\7B8279D2\46353557\DriverDoc.exe [Solvusoft Corporation - DriverDoc Application] =>.SUP.Solvusoft MOVED file: C:\ProgramData\mia2686.tmp\data\OFFLINE\74254CA7\46353557\SuiteClient.dll [Solvusoft Corporation - Client Library] =>.SUP.Solvusoft MOVED file: C:\ProgramData\mia2686.tmp\data\OFFLINE\56FE2F1\46353557\Notification.dll [Solvusoft Corporation - Notification SDK] =>.SUP.Solvusoft MOVED file: C:\ProgramData\mia2686.tmp\data\MERGEMOD\program files\Solvusoft\LogFilesCollector.exe [Solvusoft Corporation - Log Files Collector Tool] =>.SUP.Solvusoft MOVED file: C:\ProgramData\mia2686.tmp\data\MERGEMOD\program files\Solvusoft\MachineId.exe [Solvusoft Corporation - Machine ID Generation Tool] =>.SUP.Solvusoft MOVED file: C:\ProgramData\mia2686.tmp\data\MERGEMOD\program files\Solvusoft\MachineIdGateway.dll [Solvusoft Corporation - Interface to the Machine ID Generation Tool] =>.SUP.Solvusoft MOVED file: C:\ProgramData\mia2686.tmp\data\MERGEMOD\program files\Solvusoft\ShortcutLauncher.exe [Solvusoft Corporation - Shortcut Launcher] =>.SUP.Solvusoft MOVED file: C:\ProgramData\mia2686.tmp\data\MERGEMOD\program files\Solvusoft\SolvusoftLauncher.exe [Solvusoft Corporation - Solvusoft Suite Launcher] =>.SUP.Solvusoft MOVED file: C:\ProgramData\mia2686.tmp\data\MERGEMOD\program files\Solvusoft\SuiteService.exe [Solvusoft Corporation - Solvusoft Suite Service] =>.SUP.Solvusoft MOVED file: C:\ProgramData\mia2686.tmp\data\MERGEMOD\program files\Solvusoft\Tray\MsgSys.exe [Solvusoft Corporation - Messenger] =>.SUP.Solvusoft MOVED file: C:\ProgramData\mia2686.tmp\data\MERGEMOD\program files\Solvusoft\Tray\SolvusoftTray.exe [Solvusoft Corporation - Solvusoft Update Manager] =>.SUP.Solvusoft MOVED file: C:\ProgramData\mia2686.tmp\data\MERGEMOD\program files\Solvusoft\Tray\SuiteClient.dll [Solvusoft Corporation - Client Library] =>.SUP.Solvusoft MOVED file: C:\Windows\SECOH-QAD.dll =>HackTool.KMSpico MOVED file: C:\Windows\SECOH-QAD.exe =>HackTool.KMSpico MOVED file: C:\Windows\KMS-R@1n.exe =>HackTool.WinActivator ---\\ Registry ( Key, Value, Data) (14) DELETED key*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\bluetooth-driver-installer-64bit.softonic.com.br [] =>.SUP.Softonic DELETED key*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\bluetooth-driver-installer.softonic.com.br [] =>.SUP.Softonic DELETED key*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\bluetooth-driver-installer-64bit.softonic.com.br [327] =>.SUP.Softonic DELETED key*: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\bluetooth-driver-installer.softonic.com.br [371] =>.SUP.Softonic DELETED key*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\atozmanuals.dl.myway.com [12] =>.SUP.MindSpark DELETED key*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\atwola.com [] =>.SUP.Atwola DELETED key*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\fromdoctopdf.dl.myway.com [12] =>.SUP.FromDocToPDF DELETED key*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\mapsgalaxy.dl.myway.com [12] =>PUP.Optional.MapsGalaxy DELETED key*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ol.at.atwola.com [333] =>.SUP.Atwola DELETED key*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\pdfconverterhq.com [] =>.SUP.MindSpark DELETED key*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\pdfconverterhq.dl.myway.com [1338] =>.SUP.MindSpark DELETED key*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\videodownloadconverter.dl.myway.com [12] =>.SUP.MindSpark DELETED key*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.domesticalegal.com.br [1591] =>PUP.Optional.wwwDo DELETED key*: HKCU\Software\undefined [] =>.SUP.Downloader ---\\ Summary of the elements found (10) https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.Solvusoft https://nicolascoolman.eu/2017/02/16/hacktool-kmspico/ =>HackTool.KMSpico https://nicolascoolman.eu/2017/01/13/hacktool-winactivator/ =>HackTool.WinActivator https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.Softonic https://nicolascoolman.eu/2017/01/15/superfluous-mindspark/ =>.SUP.MindSpark https://nicolascoolman.eu/2017/02/04/superfluous-atwola/ =>.SUP.Atwola https://nicolascoolman.eu/2017/12/02/sup-fromdoctopdf/ =>.SUP.FromDocToPDF https://nicolascoolman.eu/2017/11/27/adware-mapsgalaxy/ =>PUP.Optional.MapsGalaxy https://www.nicolascoolman.com/fr/hijacker-wwwdo/ =>PUP.Optional.wwwDo https://nicolascoolman.eu/2017/12/22/sup-downloader/ =>.SUP.Downloader ---\\ Other deletions. (9) ~ Registry Keys Tracing deleted (9) ~ Remove the old reports ZHPCleaner. (0) ---\\ Result of repair ~ Repair carried out successfully ~ Browser not found (Opera Software) ---\\ Statistics ~ Items scanned : 956 ~ Items found : 0 ~ Items cancelled : 0 ~ Items options : 0/7 ~ Space saving (bytes) : 0 ~ End of clean in 00h00mn30s ---\\ Reports (2) ZHPCleaner-[S]-16052018-15_19_58.txt ZHPCleaner-[R]-16052018-15_24_18.txt